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MEASUREMENT-BASED ADMISSION CONTROL 
UTILIZING EFFECTIVE ENVELOPES AND SERVICE CURVES 

BACKGROUND AND SUMMARY OF THE INVENTION 
The present invention relates generally to network-based communication 
architecture. More particularly, the invention relates to providing controlled 
quality of service in packet-based networks through admission control. 
5 Currently much of the Internet is designed to provide "best effort" service. 

The Internet Protocol (IP) is designed to deliver packets of information to an 
ultimate destination through any available internal links that enable delivery. The 
actual time it takes to deliver these packets depends on the route taken and the 
traffic congestion encountered in route. The original design of the Internet 

10 Protocol focused on providing ultimate delivery, with the actual time to achieve 
delivery being only a secondary consideration. 

As the uses for the Internet have grown, and as Internet traffic has 
expanded geometrically, the original emphasis on delivery over timing is being 
challenged. With multicast applications and streaming audio and video 

15 applications growing in popularity, packet delivery time has become a central 
focus. Quality of Service (QoS) is a term often used to describe the degree to 
which a communications network provides reliability, availability and timely 
throughput. Quality of service addresses issues such as transmission speed, 
timeliness of packet delivery, amount of jitter a network introduces into packet 

20 streams, and the probability of outright packet loss. As businesses begin to rely 
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more and more on their Internet presence, some have expressed willingness to 
pay more for higher quality of service because the higher quality of service 
translates directly into a smoother, more responsive experience for their 
customers. Some Internet service providers thus offer different service level 
5 agreements through which they commit to provide different levels of service 
quality at different fee rates. 

There are many proposals for improving quality of service in packet- 
switched networks such as the Internet. Quality of service may be improved at 
the individual router level by making the routers faster and more intelligent. 

10 However this also increases the system cost. Other proposals address the 
quality of service issue at the network model level. At the network model level, 
the performance of individual routers are largely ignored; focus instead shifts to 
the aggregate performance of all routers in the network. One popular approach 
is to consider the aggregate network only in terms of its outer boundary or end- 

15 to-end performance. Using such an analytical approach, the performance of the 
entire network, and the quality of service it provides, can be largely controlled by 
the behavior of the routers occupying the edge of the network (that is, the 
routers at the ingress and egress points). 

There are several end-to-end network models for controlling quality of 

20 service (QoS) in popular use today. Among the leading models are Integrated 
Services (IntServ), and Multi-Protocol Label Switching (MPLS) and 
Differentiated Services (DiffServ). IntServ supports a per-flow quality of service 
guarantee. It employs a relatively complex architecture in which resources are 
reserved by means of a signaling protocol that sets up paths and reserves 
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resources. MPLS provides another quality of service guarantee approach that 
focuses on packet forwarding. Packets are assigned labels at the ingress of an 
MPLS-compatible domain. Subsequent classification, forwarding and services 
for the packets are then based on those labels. 
5 Models, such as IntServ and MPLS, address QoS on a per connection 

basis and can present scalability difficulties. To provide better scalability, other 
models have been proposed that address QoS on a traffic aggregate basis. 
DiffServ is one example of such a model. DiffServ provides quality of service 
guarantees to packet aggregates by marking packets differently to create 
10 different packet classes/aggregates that are entitled to different quality of service 
handling. 

For the most part, aggregate traffic-based network models share a 
number of common concepts. They begin from a premise that the network can 
be characterized as having edge and core routers. The edge routers accept 

15 customer traffic (i.e., packets from any source outside the network). Core routers 
provide transit packet forwarding services among other core routers and/or edge 
routers. The edge routers control ingress of traffic and thus perform an important 
admission control function, by permitting or declining requests by outside traffic 
to enter the network. With the ultimate traffic flow being controlled by the edge 

20 routers, through admission control, the core routers simply need to differentiate 
traffic insofar as necessary to cope with transient congestion within the network 
itself. The network models may employ statistical multiplexing to maximize 
utilization of the core router resources. 
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Predicting and controlling traffic flow through a network at the aggregate 
level is a very complex problem. Admission control algorithms that overly restrict 
ingress waste internal core router resources. On the other hand, admission 
control algorithms that are too lax can flood the network with too much traffic, 
5 resulting in severe drop in quality of service. There have been numerous 
admission control algorithms proposed. While some of these have been quite 
ingenious, there remains a great deal of room for improvement. 

For example, Centinkaya and Knightly, in an article entitled "Egress 
Admission Control," IEEE Info Com 2000, describe a framework for scaleable 

10 quality of service provisioning in which admission control decisions are made at 
the egress routers based solely on aggregate measurements obtained at the 
egress router. They introduce a measurement-based service envelope as a way 
to adaptively describe the end-to-end service received by a traffic class. 

The present invention is an improvement upon the above technique in 

15 which a measurement-based admission control algorithm is based on the global 
effective envelopes of an arriving traffic aggregate and upon the service curves 
of the corresponding departing traffic aggregate. The admission control 
algorithm is well adapted to a variety of different network models. Although the 
invention will be principally described in the context of a multi-router network, the 

20 concepts employed are equally applicable to autonomous network systems and 
even switching devices. In a switching device, for example, the switch 
hardware/software provides several input ports and output ports. The present 
invention may be used to control flow of traffic among these input and output 
ports. Therefore, the invention is applicable to "networks" of different 
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architectural granularities, ranging from single device switches to large, multiple 
device computer network domain. 

For a more complete understanding of the invention, its objects and 
advantages, refer to the following description and to the accompanying 
5 drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 
Figure 1 is a network diagram illustrating an exemplary end-to-end 
network model, useful in understanding the admission control algorithm of the 
present invention; 

10 Figure 2 is a block diagram illustrating the pertinent parameters 

associated with arriving traffic and admitted traffic in a network; 

Figure 3a is a flowchart diagram of the presently preferred admission 
control algorithm, illustrating global effective envelopes; 

Figure 3b is a similar flowchart diagram of the presently preferred 
15 admission control algorithm, illustrating local effective envelopes; 

Figure 4 is a graph illustrating the calculation of delay bound; 
Figure 5 is a timing diagram illustrating an example of a measured time 
interval, where T = 3t and M = 2; 

Figure 6a and 6 b are graphs illustrating measured arriving traffic for time 
20 interval kx 100 ms; 

Figures 7a and 7b are graphs illustrating measured service envelope for 
time interval 100 ms; 
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Figures 8a, 8b and 8c are graphs of average link utilization as a function 
of delay bound for three different scenarios, for delay bound d 1 00 ms. 

DESCRIPTION OF THE PREFERRED EMBODIMENT 
5 Referring to Figure. 1, an exemplary network is illustrated at 10. Network 

10 includes a plurality of edge routers, such as router 12 and router 14 that are 
in turn connected to a plurality of core routers 16. For purposes of illustration, 
the edge router 12 serves as the ingress node 18 and edge router 14 serves as 
the egress node 20. Arriving traffic enters through the ingress node and 

10 departing traffic leaves through the egress node, as illustrated. 

For purposes of illustration the arriving aggregate traffic 22 comes from 
network 24 via edge router 26. For purposes of illustration it will be assumed 
that the edge router 26 includes a traffic conditioner function 28, limiting the flow 
of arriving aggregate traffic to within predefined bounds. 

15 For purposes of illustration the departing aggregate traffic 30 exits edge 

router 14 and enters network 32. 

Network 10 implements an admission control function 34 which of the 
packets of arriving aggregate traffic 22 are admitted to the network 10 and which 
are blocked. The admission control function 34 may be localized in a single 

20 router, such as edge router 12. Alternatively, the admission control function can 
be distributed across the network, with the function being performed by plural 
routers within the network 10. In accordance with the invention the admission 
control function 34 implements an admission control algorithm that is based 
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upon the global effective envelope 36 of the arriving aggregate traffic 22 and 
upon the service curves 38 of the departing aggregate traffic 30. 

Figure 2 illustrates network 10 with the arriving traffic, admitted traffic and 
departing traffic being shown in greater detail. The figure introduces some of the 
5 terms that will be useful in understanding the presently preferred algorithm. The 
arriving traffic 22 is assumed to be supplied through a traffic conditioner or 
regulator 28, which may be implemented at the ingress node 18 to enforce the 
arriving traffic to comply with the traffic specification submitted by the sender. 
The traffic conditioner or regulator may be modeled as a leaky bucket that 
10 provides a simple metering function. Alternatively, the traffic conditioner may 
provide more sophisticated traffic shaping functions where the temporal 
characteristics of a traffic class are selectively modified by delaying local packet 
forwarding. 

Associated with arriving traffic 22 is a deterministic envelope 42. The 
15 deterministic envelope may be characterized in terms of three variables: peak 
traffic rate, average traffic rate and burst size parameter. The arriving traffic also 
is assumed to have an associated quality of service requirement 44. Typically 
each class of service would have its own quality of service requirement. Thus 
multiple QoS requirements are illustrated at 44 in Figure 2. The QoS 
20 requirements may be characterized by the following variables: probability of 
delay violation and delay bound. 

The admitted traffic 46 may be differentiated from the arriving traffic, in 
that the admitted traffic has already passed the admission control point and is 
thus currently flowing in network 10. When the admitted traffic 46 leaves network 
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10 it represents departing traffic 30. The departing traffic 30 has associated with 
it a service curve or service envelope 48 that is measured by monitoring each 
packet's arrival time and departure time. 

The admission control algorithm of the presently preferred embodiment 
5 uses the associated deterministic envelope 42 of the arriving traffic and the 
associated service envelope 48 of the departing traffic in making a decision 
whether to admit or deny arriving traffic to meet the desired QoS requirements. 
Figures 3a and 3b show the presently preferred algorithm in flowchart form. A 
more rigorous mathematical derivation of the preferred algorithm is presented 

10 below. The flowcharts of Figures 3a and 3b make reference to specific 
equations from the detailed mathematical derivation, where applicable. A 
discussion of the flowchart will be presented first, as a way of introducing the 
detailed mathematical derivation that follows. Specifically, Figure 3a applies to 
global effective envelopes; Figure 3b applies to local effective envelopes. The 

15 content of these two figures is similar; hence a detailed discussion of Figure 3a 
is presented below and may be considered applicable to Figure 3b, except 
where the mathematical derivation differs, as will be evident by comparing the 
Figures. 

Referring to Figure 3a, the preferred algorithm begins at step 60 with a 
20 request to be admitted to the network. As part of the request, the incoming traffic 
submits its traffic characterization, which is expressed in terms of 
characterization parameters 62. The specific parameters used by the presently 
preferred embodiment are: 

■ Deterministic Envelope Aj*(x); 
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■ Quality of Service Requirements, QoS; 

■ Delay Bound, d; 

■ Probability of Delay Violation, e. 

Next, at step 64, the algorithm constructs a global effective envelope for 
5 the arriving traffic, based on the submitted parameters 62. In the mathematical 
derivation that follows, the effective envelope for arriving traffic is characterized 
as Gnew- The G ne w envelope is depicted in Figure 3 at 66. As indicated by the 
dashed lines and bracketed notation, step 64 is performed using equations 3.8- 
3.11. 

10 Next the algorithm continues at step 68 to construct a global effective 

envelope for the admitted traffic, based on measured statistics. Specifically, the 
measured statistics, listed at 70, include the average and the variance of the 
amount of arriving aggregate traffic. In the detailed mathematical derivation 
which follows, the global effective envelope for admitted traffic is designated as 

15 G% . In Figure 3, this G% envelope is shown at 72. 

The final admission control decision, step 74, is made based on an 
analysis of both effective envelopes 66 and 72 along with the service curve 40 
20 calculated using equation 4.5 and the algorithm shown in Table I below. 
Specifically, the admission control decision will admit incoming traffic if: 
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For a more precise statement of the above admission control condition, 
see the following detained description and in particular, Eqn. (3.12). 

Detailed Description of Preferred Admission Control Algorithm 
5 A detailed description of the preferred algorithm will now be provided 

below. For purposes of illustration a Differentiated Service (DS) or DifServ 
architecture will be assumed. The invention is not limited to the DS 
architecture inasmuch as the admission control algorithm of the invention may 
be used with a variety of network architectures. 

10 In order to provide Quality of Service (QoS), the Integrated Services 

(IS) architecture use a signaling protocol to set up resource reservations at all 
routers along the path. Since this approach requires that all routers have to 
keep per-flow state and process the per-flow resource reservations, this 
approach has known scalability problems. Differentiated Service (DS) is 

15 another approach to provide QoS, but without the restriction on scalability. 
Routers need only to implement scheduling and buffering mechanisms and 
apply them based on the DS Code Point (DSCP) presented in the header of 
arriving packets. The end-to-end QoS service across several domains is built 
by combining the per domain behaviors (PDBs) of individual DS domains. 

20 Those PDBs in their terms are constructed by an appropriate deployment of 
per-hop forwarding behaviors (PHBs). Several DS domains can exist within a 
single autonomous system (AS). The definition of PDBs is an active area of 
research, with the first few drafts currently available]. Hence DS addresses 
scalability by providing QoS guarantees on traffic aggregate level. 
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As discussed above, one of the critical requirements for service 
provisioning across a DS domain is a presence of an effective Connection 
Admission Control (CAC). Such admission control can be utilized while 
establishing dynamic service level agreements (SLAs) for premium service 
5 across DS network, or consulted upon re-negotiations of static SLAs. 
Bandwidth Broker (BB) entity of a DS domain is a typical place for such 
admission control. The difficulty involved in designing the effective CAC, is 
that many solutions lead toward topology-dependent implementations, thus 
limiting their scope and increasing their complexity. 

10 To implement admission control for DS without scalability problems, 

several researchers have proposed various forms of Endpoint CAC. In this 
design, the endpoints of a DS domain (ingress/egress routers) perform 
admission control and resource management. The routers measure traffic in 
the network to detect the level of available resources and admit a new 

15 connection if and only if, the detected level of resource is sufficiently high. 

The preferred embodiment provides a measurement-based CAC 
algorithm, which provides statistical QoS guarantees on a traffic aggregate 
level in a DS domain. The ingress traffic arriving at the boundary of a DS 
domain is assumed to be conditioned by the upstream domains, policed by 

20 our domain to adhere to the rules of an established SLA, and further marked 
with the appropriate DSCP. Leaky-bucket based policers, shapers and 
markers are widely proposed. As the DS architecture extends some PDB for a 
traffic aggregate, we call this traffic aggregate a class in a subsequent 
discussion (different from DS class). We target the PDBs, which offer delay 
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guarantees to a classified traffic aggregate given both delay and delay 
violation probability. We described the deterministic envelopes, i.e., arriving 
traffic envelopes and service envelopes, and the bound on performance 
characteristics, which can be obtained, from those envelopes. We then derive 
5 a measurement-based CAC to establish dynamic SLA and provide statistical 
guarantees for a variety of service classes by exploiting the statistical traffic 
envelopes, called global effective envelopes and service curves. To obtain 
these envelopes, we use the measurement approach. The measurement of 
the service curves allows our admission control condition to work without the 

10 knowledge of the topology of the DS domain and cross traffic in the domain. 

Let us consider a traffic arriving to a network domain. The traffic enters 
the domain at an ingress node 18 and destines to an egress node 20 (see 
Figure 1). In the following we consider a continuous-time fluid low traffic model. 
An arriving traffic from different flows is differentiated by its QoS requirements. 

15 Here we consider the probability of delay violation and the delay bound as the 
QoS requirements of interest. An arriving traffic with the same QoS 
requirements, i.e., the same delay bound and probability of delay violation 
requirements, is treated as a service class. Hence, arriving traffic into the 
domain is partitioned into Q classes. We use N q to denote the number of flows 

20 within a class q . 

The arriving traffic from the flow j of the class q in an interval (t l9 t 2 ) is 
denoted as AJ(t l9 t 2 ). We assume that traffic arrival from each flow j is 
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regulated by a traffic conditioner and upper bounded by a deterministic 
subadditive envelope Af(r) as follows: 

A q j(t,t + T)<Af(T) \/t>0, Vr>0. (2.1) 

The arriving traffic is characterized by the deterministic envelope with a 
5 set of parameters. The most commonly used traffic regulators are leaky buckets 
with a peak rate enforcer. The traffic on flow j is characterized then by three 

parameters (P^cr^pj) with a deterministic envelope is given by 

Af (r) = min{P/ r, a] + p)r} V r > 0 (2.2) 

where P? > p] is the peak traffic rate, p) is the average traffic rate, and 

10 a] is the burst size parameter. 

As a generalization of the peak-rate enforced leaky bucket the traffic on flow j 
may be characterized by a set of parameters {&%,/>%} Mt ... tK , with a 
deterministic envelope 

Af(r)=mmJa%+p%T} (2.3) 

15 where K] is the number of leaky-bucket pairs. 

It is also noted that flows from the same service class can be 
characterized by different deterministic envelopes, but can have the same QoS 
requirements. 

We use A q j out (t l9 t 2 ) to denote the traffic from flow j of the class q leaving the 

20 domain at the egress node in an interval (t l9 t 2 ). We then define the aggregate 
traffic of class q as follows: the aggregate of arriving traffic, 
A Nq (t X9 t 2 )= X A q j(t x ,t 2 ) and the aggregate of departing traffic 

jeNq 
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^'('i>' 2 )= X A] out {t Xi t 2 ). For a time interval of length 0 \ we define the 

JeNq 

empirical envelope, E Nq {r,/3) of an arriving aggregate N q of flows from class 
q , which is the upper bound of the arriving aggregate in any time interval of 
length r < /? as follows: 

5 E Nq {r^)= sup A Nq (t 9 t + r) (2.4) 

In the following, we will focus our discussion on the aggregate traffic of a 
single service class and drop the index 'q \ We will introduce the definition of a 
service curve and its application. We assume that there is no traffic in the 
10 domain at time * = 0. Therefore, for an aggregate traffic, the amount of 
backlogged traffic in the domain at any time t , B(t) , is given by 

B{t) = 4,(0,0 - 4T(0,0 > 0. (2.5) 
Also the ingress-to-egress delay suffered by the aggregate traffic at time t is 
denoted by d(t) and is defined as follows: 

15 rf(0 = min{z : z > 0 and A N (0,t) < A° N ut (0j + z)} (2.6) 
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Definition of Service Curve 

Let S(-) be a non-decreasing function, with S(0) = 0. We say that the 
domain guarantees the service curve S(>) for the aggregate traffic if for any time 
/ , there exists s < t such that B(s) = 0 and A° N ut (s 9 t) > S(t~s) . 
5 It can be seen that S(t-s) specifies the lower bound of the amount of 

the aggregate traffic needed to be served and depart from the domain during 
some interval (s,t) , where the domain is empty at time s . 

From the definition of service curve, the upper bound of delay can be 
obtained as follows. Consider a busy period of length/?. Let s denote the 

10 starting time of the busy period, that is, B(s) = 0 and A N (0,s) = A° N ut (0,s). We 

assume that the domain guarantees the service curve 5( ) , that is 

A° N ut (s 9 t) > S(t-s) , where s <t +d < jS . From the definition of service curve, we 

have A™'(s 9 t + d) = A°„ ut (Oj + d)- A N (0,s)> S(t + d - s) . From Eqn. (2.6), thus, 

A„(p 9 t)> A° N ut (0,t + d) >A N (0 9 s) + S(t + d-s). Hence, from Eqn. (2.4), 

15 A„(s 9 t)<E N (t-s;0)>S(t + d-s) (2.7) 

Let r-t-s , it then follows that, for all time t > 0 , the delay defined in Eqn. (2.6) 
is upper bounded as follows: 

c/(0<min{z:z>0 and E N (r 9 j&)< S(r + z)} 
20 < max min{z : z > 0 and E N (r; /?)<S(t+ z)} (2.8) 

From Eqn. (2.8), it is note that the upper bound on delay is the maximum 
horizontal distance between the arriving aggregate envelope (E N (r;/7) ) and the 
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service curve S(r) (see Figure 4). It is also noted that p is upper bounded by 
A™ > which is the maximum busy period of the aggregate traffic and can be 
determined as: y? max = inf{r >0| £ AUr) < S(r)} . Therefore, we will use 

/? = Aiax in the following discussions. 
5 The preferred admission control algorithm exploits the deterministic 

envelopes and the service envelopes to obtain the upper bound of the delay 
experienced by an arriving traffic based on the worst-case scenario where it is 
assumed that all flows send traffic with their peak rate simultaneously. 

In the next section, following the concept of the described envelopes, we 
10 will derive a statistical service where a small portion of traffic is allowed to violate 
the delay QoS requirement. We will use so called global effective envelopes to 
characterize arriving aggregate traffic for each class. Using these envelopes 
allows us to derive a CAC for statistical services which can be perform the same 
fashion as for deterministic services. 

15 

Probabilistic Guarantees with Effective Envelopes and Service Curves 
In this section, we derive the probability of delay violation based on the 
upper bound of the delay shown in the previous section. We then obtain an 
admission control condition for a single service class by applying the definition of 
20 local and global effective envelope presented in R. Boorstyn, A. Burchard, J. 
Liebeherr, and C. Oottamakorn. Effective envelopes: Statistical bounds on 
multiplexed traffic in packet networks. In Proceedings of IEEE INFO COMM 
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2000, Tel Aviv, Israel, March 2000 (hereinafter "Boorstyn, et. al."). We finally 
discuss the admission control conditions for multiple service classes. 

Probabilistic Guarantees with local Effective envelopes and Service Curves 



Again we will first consider a single service class and we drop the index 
' q\ An aggregate of arriving traffic from the same service class A N (t l9 t 2 ) has 
the same probability of delay violation, a, and delay bound requirement, d . 
A N (t x ,t 2 ) are u PP er bounded by a family of nonnegative random processes 

10 A N (t i9 t 2 ), which has the following properties: (1) Stationarity: the statistical 
properties of A N (t X9 t 2 ) do not change with time (2) Independence: The A N (t l9 t 2 ) 
are stochastically independent among all service classes. Let again D N (r) 
denote the ingress-to-egress delay experienced by a bit of an aggregate traffic 
of the AT flows which arriving at the domain at time r. We assume that D n (t) 

15 is a random variable. For a given delay bound d , the domain guarantees that 
the ingress-to-egress delay of any arriving bit will not exceed the delay bound 
d , that is, for all time t >0,0< t<B^, from Eqn. (2.8), D N (r) = min{z : z > 0 

and A N (t,t + t) £ S(r+ z)} <d or, for all time />0, 0<r<5 max , 

A N (t,t + t) < S(t+ d) . The delay violation occurs if 3D N (r) such that 
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20 



D N (r)>d 



or, 3 t such that 



A N (t 9 t + r)> S(j + d) 
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With Eqn. (2.8), the probability that the arriving traffic experiences a delay 
violation is required to be bounded by s and we have, for all time *>0, 
0<t<b^, 

Pr[D N (r)> d] = ¥x[A N {t,t + T)>S{t + d)} < s (1) 

5 

A set of new flows request same service guarantees from a DS domain. The 
CAC uses the admission control test to ensure that the requested service 
guarantees and other flows from all service classes can be simultaneously 
satisfied. From Eqn. (1), we can obtain the admission control condition for a 
10 single service class by using the definition of local effective envelope as 
follows: 

Definition (Local Effective Envelope) 

A local effective envelope for A N (t 9 t + r) is a function L N that satisfies for 
15 all r>0 and all t 

?x[A N (t, t + r) < L N (r, e)] > 1 - e 

It can be seen that a local effective envelope provides a probabilistic bound for 
20 the aggregate traffic A N (t,t + f) for any specific time interval of length r . 

Lemma 
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WJ 

Given a set of flows that is partitioned into M classes, and each class 
contains N m flows with aggregate arrivals, A Nm . Let L Nm {r\e) be local effective 

envelope for class m . Then the following inequality holds: given x, 



If (r,s) <x t then for all t, Pr 



Y, A N m (t 9 t+T)>X 



<M £. 



We divide flows from the same service class into two categories, i.e. M = 2 . 
The first group is the set of flows, N that are already admitted to the domain. 
The second group is the new set of flows, K , requesting the QoS service from a 
DS domain. We denote L N as the local effective envelope of the first group and 

L new as the local effective envelope of the second group. 

Admission control condition for a single service class 

From the definition of the local effective envelope and the lemma, from 
Eqn. (1 ), we have that the arriving traffic has a delay violation with probability < s 
if 

15 L N (T;£/2) + L new (r;£/2)<S(r + d) , for 0< r<B max (2) 

Remark: 

• If for the same service class the set of new flows are regulated 
by different deterministic envelopes A* , for each set of flows 

which have the same A* it is required to construct their 

20 L j new (-\£j), where f = si 2. Therefore Eqn. (2) becomes 

j 

i,(r lf /2) + p„ w (^ ; )<S(r+rf) .for 0<r<Z? max (3) 
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• The CAC in Eqn. (2) does not depend on the topology of the 
domain and the scheduling algorithms within the domain, but the 
measurement-based traffic-characterized envelopes, which can 
be measured at an ingress and egress node in a DS domain. 

5 

Local Effective Envelope using Measured Moment 

We consider a set of admitted flows, N . We characterize the distribution of the 
aggregate traffic using the Central Limit theorem, which does not require the 
10 knowledge of the underlying distributions of each flow. An approximate local 
effective envelope of the aggregate traffic can be obtained from the Central Limit 
Theorem as follows [1]. From the definition of the local effective envelope, we 
set ¥r\A N {t,t + r) > x]« si 2 and we obtain, 

L N (r; W2)« X&) + zcr(r) (4) 
15 where z has the approximate value z « ^|log(2^)| , and X(r) and 

cr 2 (r) are measured average and variance of the amount of aggregate 
traffic, respectively. We will discuss those measurements in the next 
section. 

20 Since the number of new flows may be just a few flows, the Central Limit 

theorem may not be the appropriate choice for constructing their local 
effective envelope, i.e., the bound obtained may not be tight enough. 
Instead, we will use the Chernoff bound, which provides more rigorous 
bound on the aggregate traffic. The local effective envelope of a set of 
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new flows, K , can then be obtained by using the Chernoff bound, and is 
given as follows: 

Recall the Chernoff bound for a random variable Y : 

Pr[y > y] < e~ sy E[e sy ] Vs>0 (5) 

We have 

Pr[A K (t,t + r) > Kx] < e-^Mxis, r) . (6) 
where M K (s,r) is the moment generating function of the aggregate 

traffic. 

In Boorstyn, et. al. M K (s,r) is derived and given in term of the 
deterministic envelopes of the flows, that is the leaky bucket function in 
our case, s is chosen so that Eqn. (6) is minimal. With these values of s 
and M K (s, r) , it yields 

15 L m (ns/2) = K min{*, A* K (r)} (7) 

A K {r)~ pr 
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EL 



A K (r) 



A K {f)-x 



A * {T) • --.UK 



<(W2) l/A (8) 



where A* K (r) is a deterministic envelope for each new flow. 
20 Admission control condition for multiple service classes 

The admission control condition in Eqn. (2) does not provide the guarantee that 
QoS requirements of other service classes use the same ingress-to-egress path will be 
satisfied if a new set of flows is admitted into the domain. To be able to provide their 
guarantees, without loss of generality, we assume that the new flows have the highest 
priority and we test the admission control condition for all the service classes. This can 
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be shown as follows. For each service class we obtain an arriving aggregate traffic 
envelope L q N (r,s q 12) and a service envelope S q () . From Eqn. (2), the new flows with 

an arriving envelope L new (r;s q 12) will be admitted if the following condition is satisfied: 

for all service classes q , 

5 L\ (r; s q 1 2) + L new (r; s q 1 2) < S« (r + d q ) , for 0 < r < 5 max (9) 

In this section we show our CAC, which depends on the measurement-based 
envelopes {L N ( ;s) and 5(0 ). In the next section we show how to obtain these 

envelopes. 
10 

Probabilistic Guarantees with Global Effective envelopes and Service Curves 
In this section, we derive the probability of delay violation based on the 
upper bound of the delay shown in the previous section. We then obtain an 
15 admission control condition for a single service class by applying the definition of 
global effective envelope presented in. We finally discuss the admission control 
conditions for multiple service classes. 

Again we will first consider a single service class and we drop the index 
l q \ An aggregate of arriving traffic from the same service class in the interval 

20 (t^t 2 ), A N {t x j 2 ) has the same QoS requirements: probability of delay violation, 
s, and delay bound requirement, d . A N (t l7 t 2 ) is characterized by a family of 
nonnegative random processes, which has the following properties: (1) 
Stationarity: the statistical properties of A N (t l9 t 2 ) do not change with time (2) 

Independence: The A N (t l9 t 2 ) are stochastically independent among all service 
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classes. Consider an interval of length of the maximum busy period j3 . Let 
again D N (t) denote the ingress-to-egress delay experienced by a bit of an 
aggregate traffic of the N flows which arriving at the domain at time t during the 
busy period. We assume that D N (t) is a random variable. For a given delay 
5 bound d , the domain guarantees that the ingress-to-egress delay of any 
arriving bit will not exceed the delay bound d , that is, from Eqn. (2.8), for all r, 
0<r</?, 

D N (t) = min{z:z>0 and sup A N (t,t + r) < S(r+ z)} < d (3.1) 

or, for all r , 0 < r < j3 , 

10 sup A N (t,t + t) = E n (t;j0) <S(r + d) . (3.2) 

The delay violation occurs if 3D N (t) such that 

D N {t)>d 

or, 3t, r such that 

15 sup A N (t 9 t + r) > S(r + d) 

With Eqn. (3.2), the probability that the arriving traffic experiences the delay 
violation is required to be bounded by s and we then have 

20 Pr[D N (t)<d 9 Vt,r) = Pr[£„(r;^) < S(t + d\ for all r,0 < r < jS] 
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(3-4) 



A set of new flows request same service guarantees from a DS domain. The 
CAC uses the admission control test to ensure that the requested service 
5 guarantees and other flows from all service classes can be simultaneously 
satisfied. From Eqn. (3.4), we can obtain the admission control condition for a 
single service class by using the definition of global effective envelope as 
follows: 

10 Definition of Global Effective Envelope 

A global effective envelope for an interval of length /?is a subadditive 

function G N (r,/?,£) that satisfies: 

Pr[£„ (r; JJ) < G N (r, A s), VO < r < fi\ > 1 - s 

15 

It can be seen that a global effective envelope provides a probabilistic bound for 
the aggregate traffic A N (t,t + r) for every time interval of length r in . 

Lemma 

20 Given a set of flows that is partitioned into M classes, and each class 

contains N m flows with aggregate arrivals, A N . Let G Nm {r\^,s) be global 

effective envelope for class m . Then the following inequality holds: given x, 



24 




If ^G Nm (r;/?,s)<x, then for all t, Pr 



3m3 r:Y d E N m (?> t+r)>x(j) 



<M s. 



We divide flows from the same service class into two categories, i.e. M = 2 . 
The first group is the set of flows, N that are already admitted to the domain. 
The second group is the new set of flows, K , requesting the QoS from a DS 
domain. We denote G N as the global effective envelope of the first group and 



G new as the global effective envelope of the second group. 
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Admission Control Condition for a Single Service Class 

From the definition of the global effective envelope and the lemma, from 
Eqn. (3.4), we have that the arriving traffic has a delay violation with probability 
< e if 

5 G„(r; /?, W2) + G new (r;j3, si 2) <S{r+d) , for 0 < r < B (3.5) 

Remark: 

• If for the same service class the set of new flows are 
regulated by different deterministic envelopes A* , for each 

set of flows which have the same A* it is required to 

10 construct their G J new (;/?,£j) , where ^Sj=s/2. Therefore 

j 

Eqn. (3.5) becomes: 

G N (r,/?,s/2) + ^G J new (T;ft,£j) < S(r+d) , for 0<r<B (3.6) 

j 

• The CAC in Eqn. (3.5) does not depend on the topology of 
the domain and the scheduling algorithms within the domain, 

15 but the measurement-based traffic-characterized envelopes, 

which can be measured at an ingress and egress node in a 
DS domain. 

Constructing the Global Effective Envelope 

20 We consider a set of admitted flows, TV . We characterize the distribution 

of the aggregate traffic using the Central Limit theorem, which does not require 
the knowledge of the underlying distributions of each flow. An approximate 
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global effective envelope G N (T;fi,e)ot the aggregate traffic can be obtained 
from the Central Limit Theorem as follows. From the definition of the global 
effective envelope, we set Pr[£„ (j\/3)>x, VO < r </3]^s . For given r o ,j0 we 
then have, for every integer k , 

5 

G N {r,j3,£)^c^X{{k + \)r/k) + Z 'cr(i{k + \)Tlk)\, Vre[r 0 ,/?] (3.7) 



where ar = 1 + 1/(A: + 1), z' has the approximate value z' « y|log(2^s-')| with s' = 

r 0 (<2r-l)<s7y6fc , A'(r) and cr 2 (r) are measured average and variance of the 

10 amount of aggregate traffic, respectively. We will discuss those measurements 
in the next section. 

From Eqn. (3.4) it can be seen that there are several possible global 
effective envelopes. For given r 0 ,/? , the method recursively calculate the 

k^cci, andr, for 1 <*'<«, where r n is the first point which is greater than /?, 

15 therefore we can obtain n points of a global effective envelope as follows: 

or,. 

and, from Eqn. (3.7), 

20 



= z 



= 1 + 



z + ^l 
1 



+1 ' 



(3.8) 



(3.9) 
(3.10) 
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G N (r, ; A *) * a, [l^WQ + + 1K / K )] 



(3.11) 



where z » y|log(2^e-)| . 

5 For a set of new flows, one can obtain the global effective envelope of the new 
flows G new by using the same recursive method as follows. However, instead of 

using the measurement-based X(r) and <j 2 (t), in Eqs. (3.8) and (3.11) 

X{t) = Kp K r and <x 2 (r) = Kp K r{/L K (r) - p K r) , where p K is the long-term 

average and A* K {f) is a deterministic envelope for each new flow. 

10 

Admission Control Condition for Multiple Service Classes 

The admission control condition in Eqn. (3.2) does not provide the 
guarantee that QoS requirements of other service classes use the same 
ingress-to-egress path will be satisfied if a new set of flows is admitted into the 
15 domain. To be able to provide their guarantees, without loss of generality, we 
assume that the new flows have the highest priority and we test the admission 
control condition for all the service classes. This can be shown as follows. For 
each service class we obtain an arriving aggregate traffic envelope 
G q N (r\jS 9 £ q /7) and a service envelope S q (-). From Eqn. (3.5), the new flows 

20 with an arriving envelope G new {r\j3,s q 12) will be admitted if the following 
condition is satisfied: for all service classes q , 

^(^;A^/2) + G_(r;A^/2)<S 9 (r+^) ,for0<r<5 (3.12) 
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In this section we show our CAC, which depends on the measurement-based 
envelopes ( G N (•; ft, s) and 5( ) ). In the next section we show how to obtain 
these envelopes. 

5 

Measurements of Perspective Envelopes 
In this section, based on, we show how to measure the characteristic 
parameters for constructing the global effective envelopes of the arriving 
aggregate traffic and the service envelope of the departing aggregate traffic for a 
10 single sen/ice class. First we measure the average and variance of the amount 
of arriving aggregate traffic, which are used in Eqn. (3.3). We then measure the 
service envelope of a single service class traffic. At the end of this section we 
show the admission control algorithm that we will use in the evaluation example 
below. 

15 

Measurement of Aggregate Arriving Envelopes 

We are interested in the aggregate characteristic of an arriving traffic at 
ingress node. To characterize the aggregate traffic as a Gaussian process, we 
need to measure the first and second moment of the amount of traffic arriving at 
20 the ingress node. We note that in, the average and variance of arriving traffic 
rate are measured, while here we measure the average and the variance of the 
amount of an arriving traffic. Again let A N {t x ,t 2 ) denote the arriving traffic from 

an aggregate flow in the interval (t l9 t 2 ). Consider time to be slotted with the 
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equal length r, i.e., for MPEG sources, we can think of ras the frame time. We 
also divide time into M large intervals whose length is T (see Figure 5). For the 
m th interval we obtain the bound of an arriving traffic, X™ as a function of time 

interval kr. We consider at the current time t. Then the bounded amount of the 
5 measured traffic over the m th interval of length T from the current time can be 
obtained as follows: 

X™ = max A[t-mT + nrJ-mT + (n + k)r] (4.1) 
T 

10 for m = 1, /Wand k- 1, — . 

T 

Thus for every T time slot, the bounded envelope X™ is obtained. From these 
envelopes we can obtain the average X k and the variance a\ of the measured 
envelopes as follows: 

(4-2) 

15 and 

AM 

^ 2 ~ZW-^) 2 (4.3) 

Remark: r,T, and M are the key parameters for the measurement. Choosing 
an improper choice of r , T , and M may lead to inaccurately characterize the 
20 arriving aggregate traffic and consequently overestimate the bandwidth required 
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by connections. We varied these parameters in our approach and found that our 
approach is not very sensitive to the changing. The further discussion of how to 
choose the parameters can be found in C. Cetinkaya and E. Knightly. Egress 
Admission Control. In Proceedings of IEEE INFO COMM 2000, Tel Aviv, Israel, 
5 March 2000; and D. Tse and M. Grossglauser. Measurement-Based Call 
Admission Control: Analysis and Simulation/In Proceedings of IEEE INFOCOM 
1997, Kobe, Japan, April 1997. 

We provide an example of an arrival envelope from a simulation 
experiment in Figure 6(a) and (b). In Figure 6(a), we plot the amount of arrival 

10 aggregate traffic as a function of time interval. While Figure 6(b) depicts the 
arrival aggregate rate as a function of time interval. The simulation consists of 
120 multiplexed independent MPEG-2 video traces. These traces are obtained 
from the movie "Starship Troopers" ("Starship"). Starship has the peak rate of 
18.6336 Mbps and the average rate of 4.26 Mbps. The frame rate of Starship is 

15 30 frames per second. This type of traffic has a quite large peak-to-mean ratio, 
which indicates its significant burstiness. From Figure 6, the arriving envelope 
and arrival rate are significantly smaller than the peak envelope and peak rate, 
respectively. This is due to the statistical multiplexing of the traffic aggregate. As 
the figures show, given a long time interval, the amount of the arriving traffic and 

20 its arrival rate decrease toward the average rate. 

Measurement of Aggregate Service Envelopes 
Consider traffic arriving at a DS domain at an ingress node and leaving at 
an egress node. For measuring service envelopes, we assume that the clocks in 
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the domain are synchronized. We consider at the packet system where packets 
are serviced at discrete times rather than continuous times. Each packet arriving 
at the ingress node will be time-stamped. Hence at the egress node, we are 
able to determine the ingress-to-egress delay of each packet. Let a } denote the 

5 arriving time and dj denote the departure time of the f h packet. We consider 

this traffic to be backlogged whenever at least one packet in the system. The 
backlogging condition can be checked by comparing the arriving and the 
departure times of packets. Traffic is continuously backlogged for k packets in 
the interval [a j ,d j+k _ x '\ if 

10 d J+m > a J+m+l , for all 0 < m < k - 2 (4.4) 

for k > 1 . 

Next, let ServEnv is a list containing (x,Sj(x)) pairs which represent the 
amount of time Sj(x) required to service x bits when considering the packet j 

15 with the number of backlogged packets = k. Again consider an interval of length 
T, which contains the total number of arriving packets, n. For packet y", we 
consider the delay of the packet and also the delay of the packets backlogged 
after this packet. We thus can define S)(x) as follows: 

S k j(x) = d j+k _,- aj (4.5) 

20 

for all k > 1 and satisfies the backlogging condition. 
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A bounded service envelope can be obtained as follows: 

Initialize (ServEnv) 
for packet j - 1 to Tl 

S) <- d s -a, 

5 x(S\ ) < - Size (packet ( j )) 

k <- 2 

while (*/ ;+Jt _ 2 >a J+k _ l ) 

Sj <- d^-aj 

x(Sj) <- x(Sj~ l ) + Size (packet (j + k-ly) 
k <- k + 1 
Merge (ServEnv, ( x(S * ) , 5 * ) VA: , ServEnv) 

for / = (Length(£erv£>iv) -1) to 0 
if(jc[l]<x[l-l]) 
JO Remove (x[i - - 1]) 

Using ServEnv to plot a service envelope. 

Table I Bounded Service Envelope Algorithm 
Figure 7(a) shows a service envelope of an aggregate of departing traffic 
obtained from a simulation. The simulation consists of a node with a 622-Mbps 
link and the same number of sources (Starship) used for Figure 6a and 6b. It is 
15 noted that the envelope is an increasing function. In addition, Figure 7(b) depicts 
the slope of the service envelope. The slope of the envelope indicates variation 
of the service rate for the burstiness of the arriving aggregate flows. 

Admission Control Algorithm using local effective envelopes 

20 I. To request the QoS for its traffic from a DS domain, the user submits to 

a BB its traffic characterization containing A*(r), QoS requirements, 

d and s . 

II. CAC constructs a local effective envelope, L new1 based on the 
submitted parameters by using Eqs. (7) and (8). 
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ill. CAC then uses the measurement of the average and variance of 
arriving traffic to construct another local effective envelopes, L q N , from 

Eqn. (4). 

IV. CAC finally makes an admission control decision based on L new , L q N ^ , 

5 and S q obtained from Section as follows. The request is accepted if the 

condition in Eqn. (9) is true. 

Admission Control Algorithm using Global Effective Envelope 

I. To request the QoS for its traffic from a DS domain, the user submits to 
10 a BB its traffic characterization containing A*(t) 3 QoS requirements, 

d and s . 

II. CAC constructs a global effective envelope, G new , based on the 

submitted parameters by using Eqs. (3.8) - (3.1 1 ). 
in. CAC then uses the measurement of the average and variance of 
15 arriving traffic (obtained from Eqs. (4.2) and (4.3) respectively) to 

construct another global effective envelopes for admitted flows, , 

from Eqs. (3.8)-(3.11). 
iv. CAC finally makes an admission control decision based on G new , G q N , 

and S Q obtained from Section as follows. The request is accepted if the 
20 condition in Eqn. (3.12) is true. 
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Evaluation and Simulation Results 
In this section, we evaluate the effectiveness of our CAC condition. We 
consider that all flows are homogeneous, that is, all flows satisfy the same 
deterministic envelope and require the same delay QoS guarantee from a DS 
5 domain. Starship is again used as a traffic source. For simulations, we set the 
probability of delay violation s = 10' 6 and vary the delay bound requirement d . 
We consider a DS domain, which has an egress node with a link capacity of 622 
Mbps (C = 622 Mbps for all simulations). All links in the domain has the same 
capacity as of the egress link. Each node has a FIFO scheduler. We consider 
10 three scenarios where the number of nodes and cross traffic in the domain is 
changed as follows: 

I. The DS domain consists of a node without any cross traffic (see Figure 
8(a)). 

15 II. The DS domain consists of two nodes without any cross traffic (see Figure 
8(b)). 

III. The DS domain consists of three nodes with some cross traffic (see Figure 
8(c)). 

20 Note that in configuration III, we also use 40 flows of Starship as cross traffic 
with the same QoS requirements as of the main traffic. 

We will evaluate our approach ('Approach') by using the CAC algorithm 
described above. As the benchmarks for our approach, we also investigate two 
of the following approaches and a set of simulations ('Simulation'). First, we 
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consider average rate allocation ('Average Rate'), where the maximum number 
of admissible flows is determined by the link capacity divided by the long-term 
average rate of each flow and, therefore, the average link utilization for this 
approach is unity. Second, we consider the peak rate allocation ('Peak Rate'), 
where the maximum number of admissible flows is determined by the link 
capacity divided by the peak rate of each flow. For the simulation proposes, 
each flow starts randomly sending traffic into the DS domain. Many simulations 
are performed. The average result of the simulation is presented. We compare 
the average link utilization, U ave , obtained from each approach. U ave is defined 
as follows: 



where TV is the number of connection admitted to the domain, p. is the long- 
term average rate of each flow, and C is the link capacity at the egress node. 

Figures 8a-8c show the three scenarios we investigate and the 
corresponding results where the average link utilization as a function of the 
delay bound is depicted. From the results, the link utilization obtained by the 
simulations and our approach is considerably higher than the one obtained by 
the peak rate allocation. This shows that the simulations and our approach can 
exploit the multiplexing gain from the traffic aggregate and, hence, yield the high 
link utilization. For example, from Fig 8(a), for the delay bound d = 10 msec, the 
simulation and our approach yield 86% of the link utilization, respectively. While 
the peak rate allocation can only obtain 82%. In addition, the results show that 



U = 



c 
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our approach can accurately characterize arriving and departing aggregate 
traffic. Figures 8(b)-(c) show that our approach can obtain the accurate condition 
of the domain without the knowledge of the underlying topology and cross traffic 
and yield the link utilization close to the simulation results. 
5 From the foregoing it will be appreciated that the present invention 

provides a measurement-based admission control algorithm that exploits the 
global effective envelopes and service envelopes to accurately characterize 
arriving and departing traffic aggregate. Based on the measurement, the CAC 
algorithm is tunable through a set of parameters. The algorithm is scalable 

10 and can support a variety of service classes. We showed the effectiveness of 
the CAC algorithm by comparing the link utilization obtained by the algorithm 
to the results from the simulations. While the invention has been described in 
its presently preferred form, it will be understood that the principles of the 
invention may be applied to may application and that implementation details 

15 of the algorithm can be varied without departing from the spirit of the invention 
as set forth in the appended claims. 
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